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REMARKS 

Reconsideration and allowance are respectfully requested. 

The independent claims are amended in light of the claim interpretation articulated in the 
advisory action. The Examiner suggests that the running and re-running of the authentication 
procedure are not limited to the same mobile node: "the next mobile to be initialized, the routine 
will be re-run again" (emphasis added). The claim amendments reinforce that the procedures are 
for the same mobile. Example support is found on pages 6 and 7 of the specification as 
originally filed. 

Claims 23-30 remain rejected under 35 USC §103 as being unpatentable over Haverinen 
in view of Weschler. This rejection is respectfully traversed. 

Roaming in an IP-network or other system is a problem when there is a separation from 
the cellular radio communication system. The problem is solved in the claims using a trust 
relationship between a forwarding agent and the network home agent. As a preliminary, a secure 
communication is established between the user and the forwarding agent with the user 
performing a second run of an authentication procedure with a network authentication node, the 
user having previously performed a first run of that same authentication procedure in order set up 
a connection, e.g., a GPRS connection. The second authentication run, i.e., an authentication re- 
run, results in security data which the authentication node transfers to the forwarding agent using 
the trusted relationship between these two entities. In effect, the user has authenticated to the 
forwarding agent, and thus, the forwarding agent can trust that a public key received from the 
user really belongs to the user as, e.g., identified from subscriber data received from the 
network/authentication node. Thus, the forwarding agent, representing the other separated 
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system, may update the subscriber database and DNS server with linked data: subscriber 
identity/FQDN/IP/public key. 

The claims explicitly recite first and second runs of the same authentication method 
related to the cellular system for the same mobile node, which is the basis for updating a home 
agent with a current address in the cellular system. User identity is bound with a public key such 
that any other user, knowing the IP-address of the user, may establish a secure communication 
with the user being certain that the public key really belongs to the alleged user. This 
corresponds to a certification of the public key. 

Haverinen and Weschler have been addressed and distinguished in the last response. In 
addition to the differences noted there, the combination of Haverinen and Weschler lacks the 
first and second runs of the same authentication and key agreement procedure between that same 
mobile node and the authentication server to first authenticate the mobile node to the radio 
communication network and then second to generate a shared secret used to authenticate the 
mobile node to the stable forwarding agent. Haverinen and Weschler also both lack a teaching 
that following the second run authentication of the mobile node to the stable forwarding agent, 
the stable forwarding agent collects and uses subscriber contact information to assign a Fully 
Qualified Domain Name and/or IP address to the mobile node as well as updates a subscriber 
database and DNS server with the Fully Qualified Domain name and/or IP address and the public 
key provided by the mobile node. 

The Examiner refers column 20, lines 44-49 in Haverinen, but nothing there teaches that 
subscriber contact information is used in assigning the FQDN or IP address or that a subscriber 
database and DNS server are updated with this information. The last step of claim 23 leads to a 
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link between the user-provided public key and the user identity and current address. Havarinen 
does not teach this feature. 

The application is in condition for allowance. An early notice to that effect is requested. 
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